---
title: CISA Orders Federal Agencies to Patch PaperCut Flaw Under Active Attack
description: CISA orders federal agencies to patch a critical PaperCut NG/MF flaw under active attack. The vulnerability is being exploited, prompting urgent action to prevent security breaches.
canonical_url: https://codekeeper.co/ticker/cisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack
---

[Vulnerabilities](https://codekeeper.co/ticker/tag/vulnerabilities)

# CISA Orders Federal Agencies to Patch PaperCut Flaw Under Active Attack

CISA orders federal agencies to patch a critical PaperCut NG/MF flaw under active attack. The vulnerability is being exploited, prompting urgent action to prevent security breaches.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Jul 29, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

The Cybersecurity and Infrastructure Security Agency has added a cross-site request forgery vulnerability in PaperCut NG/MF print management software to its Known Exploited Vulnerabilities catalog. The flaw is currently being exploited by attackers in the wild. CISA is requiring all federal agencies to patch their systems immediately to prevent potential security breaches. PaperCut NG/MF is widely used across government and enterprise environments for managing printing services, making this vulnerability particularly concerning for organizations running unpatched versions of the software. **Source:** [The Hacker News](https://thehackernews.com/2025/07/cisa-adds-papercut-ngmf-csrf.html)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fcisa-orders-federal-agencies-to-patch-papercut-flaw-under-active-attack%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Data breaches Named Clients Deny They're in the 153M Driver's License Breach Sep 14, 2026](https://codekeeper.co/ticker/idscan-data-breach-exposes-153-million-licenses)

[Cyberattacks Two Alleged TeamPCP Cybercriminals Arrested in Australia After Global Supply-Chain Attacks Aug 28, 2026](https://codekeeper.co/ticker/australia-arrests-two-cybercriminals-in-team-pcp-crackdown)

[Software security Citrix Confirms Two Actively Exploited NetScaler Zero-Day RCE Flaws Sep 28, 2026](https://codekeeper.co/ticker/citrix-urgent-patches-netscaler-flaws)

[Vulnerabilities Maximum-Severity SonicWall Flaw Drew Exploit Attempts Within Days Oct 13, 2026](https://codekeeper.co/ticker/sonicwall-vulnerability-cve-2026-102255-attack)